$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa File: e8f13100-d644-3a83-b082-19ac1aaf66a9.roa (raw, json) Hash identifier: 6RLcCULN7a1ToofQfoo0AEARZIxA6rxx9On8UeOFUKQ= Subject key identifier: ED:15:A0:D2:ED:0A:0D:B9:E9:5E:A5:E4:52:B7:5E:93:CA:DA:06:84 Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584F497685FFDDE1678C363F6F80 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40081 IP address blocks: 2602:f948::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:85:ff:dd:e1:67:8c:36:3f:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd2e8fa0-f0c1-4bf3-ab22-471c1f487984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:3c:eb:e3:85:0f:11:12:ae:c4:13:95:21: 13:7c:9f:33:02:f4:10:96:e6:fa:f8:b3:0e:8f:14: 6b:24:a2:ce:e3:d3:9b:c6:69:6f:a5:29:02:f6:9e: 9b:a5:74:d1:5f:a8:a9:b3:7c:19:16:c7:a0:7b:27: 69:58:fb:2f:75:cb:02:4f:aa:32:3b:4c:9f:a1:52: c6:6e:73:5c:bf:b5:ab:eb:75:65:50:fb:8d:f5:a4: 24:64:1c:e1:8b:6b:db:7e:b4:be:a0:3e:57:9d:e8: 24:6e:4f:e5:84:62:ff:2f:b6:8b:29:7f:ef:df:b5: fb:ad:cd:19:cb:76:a9:49:39:69:57:75:0a:8b:cf: a2:13:f6:12:84:91:00:f7:cd:6b:90:3e:de:fe:4b: 9f:b1:7b:da:31:b3:44:19:19:af:3a:c2:9a:e1:14: cc:0b:bb:bc:a1:ad:6a:83:8c:28:6e:98:d9:b8:5c: a4:8d:00:14:f7:07:6b:66:82:59:bc:63:93:eb:da: 5a:0f:70:74:53:d4:57:dc:80:6a:74:3e:ef:a5:f5: f7:a2:c4:89:2f:54:f1:3f:3a:f2:76:35:cf:95:4c: f3:a0:e0:75:50:4a:a7:07:0e:42:91:15:b0:8a:91: 71:b6:f9:ed:55:41:95:59:5b:b8:86:26:81:68:14: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:15:A0:D2:ED:0A:0D:B9:E9:5E:A5:E4:52:B7:5E:93:CA:DA:06:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv6: 2602:f948::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7c:81:88:24:3c:cb:7c:08:e0:a2:c3:c3:8f:91:aa:4b:fa: da:77:0f:5e:2c:64:37:6c:73:6d:44:61:4c:ab:d1:81:09:b4: cb:11:b3:0f:a5:21:5c:c7:5e:2e:a9:1d:74:fa:2e:91:90:35: 48:e8:8e:04:28:a1:88:f9:e2:26:8a:39:c8:f1:3a:50:5c:30: da:7e:07:97:d7:ca:d4:ba:2d:ca:55:9e:c6:33:03:9f:b9:7f: c3:c7:23:d5:fb:14:1a:15:8d:28:5e:0a:b3:bf:01:0b:93:01: 54:76:03:af:80:21:5f:a0:7a:53:67:7c:d5:b0:05:e0:19:fe: 18:3a:0c:39:b7:59:a4:af:28:37:fe:27:7c:59:77:b2:b3:ea: ca:a6:6f:bd:b8:ba:c4:9d:00:9b:d4:35:dc:00:4a:96:40:e1: 3a:fc:48:a7:0b:f9:e6:ae:db:47:1d:0e:bc:e9:7e:b8:d7:1e: 19:cd:ae:c9:07:81:c6:cc:f7:16:4d:0e:75:9e:5c:55:15:d3: 78:c4:b0:0c:2c:e2:e3:06:2c:d5:ab:3e:e5:a8:06:6f:d8:25: 31:ca:e0:77:ae:5f:77:5e:23:81:70:36:f2:2e:e7:d1:9b:e2: 5b:37:9d:9f:49:ec:71:22:24:40:2c:07:fd:31:83:be:28:61: 01:c7:5b:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdoX/3eFnjDY/b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQyZThmYTAtZjBjMS00YmYzLWFiMjItNDcxYzFmNDg3OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cM86+OFDxESrsQTlSETfJ8zAvQQlub6+LMO jxRrJKLO49ObxmlvpSkC9p6bpXTRX6ips3wZFsegeydpWPsvdcsCT6oyO0yfoVLG bnNcv7Wr63VlUPuN9aQkZBzhi2vbfrS+oD5Xnegkbk/lhGL/L7aLKX/v37X7rc0Z y3apSTlpV3UKi8+iE/YShJEA981rkD7e/kufsXvaMbNEGRmvOsKa4RTMC7u8oa1q g4wobpjZuFykjQAU9wdrZoJZvGOT69paD3B0U9RX3IBqdD7vpfX3osSJL1TxPzry djXPlUzzoOB1UEqnBw5CkRWwipFxtvntVUGVWVu4hiaBaBQhPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO0VoNLtCg256V6l5FK3XpPK2gaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZThmMTMxMDAtZDY0NC0z YTgzLWIwODItMTlhYzFhYWY2NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5SAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKHyBiCQ8y3wI4KLDw4+Rqkv62ncPXixkN2xzbURhTKvRgQm0yxGz D6UhXMdeLqkddPoukZA1SOiOBCihiPniJoo5yPE6UFww2n4Hl9fK1LotylWexjMD n7l/w8cj1fsUGhWNKF4Ks78BC5MBVHYDr4AhX6B6U2d81bAF4Bn+GDoMObdZpK8o N/4nfFl3srPqyqZvvbi6xJ0Am9Q13ABKlkDhOvxIpwv55q7bRx0OvOl+uNceGc2u yQeBxsz3Fk0OdZ5cVRXTeMSwDCzi4wYs1as+5agGb9glMcrgd65fd14jgXA28i7n 0ZviWzedn0nscSIkQCwH/TGDvihhAcdbaw== -----END CERTIFICATE-----Generated at Tue Sep 29 11:27:45 2026 by rpki-client